01 / DEFENSE
Defensive SecOps & Detection
Deploying and tuning centralized telemetry pipelines, crafting high-fidelity detection rules, threat hunting, and executing swift incident triage.
Hardening infrastructure.
Hunting threats. Securing systems.
I am Prasi — an IT systems and cybersecurity practitioner specializing in defensive SecOps, infrastructure hardening, SIEM detection engineering, and proactive vulnerability assessments. I bridge robust IT operations with resilient security posture.
Defensive & SecOps
SIEM, IDS/IPS & EDR
Linux & AD
Tiered Hardening
Offensive Auditing
OWASP & Pen Testing
Zero Trust
Micro-segmentation
// 02. COMPETENCIES
Core Skills & Security Arsenal
Focused on deep defensive controls, resilient sysadmin practices, and offensive assessment methodologies.
02 / INFRASTRUCTURE
IT Systems & Infrastructure
Administering enterprise server fleets, enforcing CIS Benchmarks, Active Directory privilege isolation, containerization, and automated configuration management.
03 / OFFENSIVE
Offensive Security & Pentesting
Simulating adversary tradecraft to discover vulnerabilities before exploitation. Web application security, network recon, and privilege escalation auditing.
04 / NETWORKING
Network Security & Zero Trust
Building segregated, least-privilege networks. Perimeter firewalls, encrypted site-to-site tunnels, DNS sinkholing, and access control lists.
// 03. EVIDENCE & LABS
Featured Security Deployments
Real-world implementations, isolated research labs, and defensive architectures.
Enterprise Wazuh & Suricata Telemetry Pipeline
Designed and deployed a full-spectrum telemetry detection laboratory on Proxmox VE. Centralized log aggregation, real-time alert correlation, and custom Sigma/YARA signatures.
- Configured Sysmon endpoint logging & Suricata network packet inspection
- Ingested 10k+ daily events with 0-drop rate and optimized memory footprint
- Simulated atomic red-team attacks to benchmark detection time
Active Directory Tiered Model & Attack Hardening
Built a hardened multi-tier Active Directory forest with Microsoft ESAE/Red Forest principles, implementing strict credential hygiene and mitigation against lateral movement.
- Enforced LAPS, protected users group, and tiered admin jump hosts
- Audited attack paths with BloodHound & eradicated Kerberoasting vulnerabilities
- Configured automated Group Policy auditing and Canary service accounts
Automated External Attack Surface Scanner
Engineered a Python-based reconnaissance tool integrating Nmap, Nuclei, and Sublist3r to monitor external attack surfaces and generate compliance diffs.
- Scheduled recurring scans for rogue open ports and expired TLS certificates
- Automated CVE vulnerability matching against public assets
- Webhook alerts pushed to Slack/Telegram for high-severity findings
Self-Hosted Zero-Trust Gateway & Mesh Network
Created an encrypted remote-access fabric using WireGuard and reverse-proxy ACLs, bypassing expose-all port forwards with strict MFA-authenticated endpoints.
- Hardened Debian kernel parameters & UFW egress isolation
- DNS sinkholing with encrypted DoH upstream resolving (Unbound/Pi-hole)
- Automated failover and encrypted off-site backup snapshots
// 04. TRACK RECORD
Practical Experience
Real-world operational focus delivering security resilience and infrastructure stability.
IT Infrastructure & Security Specialist
Enterprise IT Systems & Security Consulting
- Engineered defensive security policies, hardened Linux/Windows systems against CIS benchmarks, and conducted internal vulnerability scans.
- Maintained zero-downtime infrastructure for core services, managing hypervisors, storage networks, and secure remote VPN access.
- Automated patch management schedules and established automated log auditing to detect anomalous user behaviors.
Systems & Network Administrator
Network Operations & Infrastructure Support
- Configured and managed enterprise firewalls (pfSense/OPNsense), VLAN isolation, and multi-branch network connectivity.
- Administered Active Directory domain controllers, DNS/DHCP infrastructure, user permissions, and backup disaster recovery workflows.
- Resolved critical network incidents and performed post-mortem root-cause analyses with actionable remediation reports.
Security Researcher & CTF Practitioner
Offensive & Defensive Security Labs
- Active practitioner on HackTheBox and TryHackMe, regularly solving machine challenges across Linux privilege escalation and web exploitation.
- Authored technical writeups detailing vulnerability exploitation paths, mitigation strategies, and secure configuration guidelines.
// 05. CREDENTIALS
Certifications & Accreditations
Validated knowledge across security fundamentals, network defense, and practical assessment.
CompTIA
✓ Verified Credential
Security+
Security operations, threat analysis, architecture, risk management, and cryptography principles.
INE / eLearnSecurity
✓ Hands-on Practical
eJPT (Junior Pentester)
Hands-on network pentesting, vulnerability scanning, web app auditing, and routing attack vectors.
Security Blue Team
✓ Defending Infrastructure
BTL1 (Blue Team Level 1)
Network analysis, incident response, digital forensics, threat hunting, and SIEM engineering.
// 06. INTERACTIVE CONSOLE
Cyber Security Terminal
Query this portfolio directly via command-line interface. Type commands or click the shortcut chips below.
PRASI SEC-SHELL v1.4 [Connected to prasi.my.id]
Welcome, guest. Type 'help' to see available commands or click the buttons below.
prasi@secops:~$
// 07. DIRECT CHANNELS
Get in Touch
Open for cybersecurity audits, infrastructure hardening roles, and technical consulting.
DIRECT EMAIL
contact@prasi.my.id
GITHUB REPOSITORIES
github.com/prasi
Code & Configs
LINKEDIN PROFILE
linkedin.com/in/prasi
Professional
TRYHACKME / HTB
PrasiSec (Active Solver)
Offensive Labs
OPERATIONAL
ENCRYPTED READY
Verified Security Info
For confidential inquiries, vulnerability disclosures, or sensitive IT architecture reviews, please encrypt communications with my verified PGP key.
FP: 4E7A 89C1 2F33 8740 918D B390 9F4C 2A1E 8B3D 7052